
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3232302e3130312e3139322e302f31392d3139203d3e203536303438.roa
File: 3232302e3130312e3139322e302f31392d3139203d3e203536303438.roa (raw, json)
Hash identifier: uqF8wzhH4s4Sai9nnAT/5YyP8zNwDYKBEZXT0VYxZLo=
Subject key identifier: C2:FE:23:B8:67:5E:04:EE:F8:E1:83:E1:92:73:29:8C:06:23:75:6F
Certificate issuer: /CN=48DCC10A7E92444E80655999E7C33C876CF1C5A8
Certificate serial: 2A069AD1C658D6B46D39F952026A35C354782E42
Authority key identifier: 48:DC:C1:0A:7E:92:44:4E:80:65:59:99:E7:C3:3C:87:6C:F1:C5:A8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3232302e3130312e3139322e302f31392d3139203d3e203536303438.roa
Signing time: Fri 18 Sep 2026 02:43:20 +0000
ROA not before: Fri 18 Sep 2026 02:38:20 +0000
ROA not after: Fri 17 Sep 2027 02:43:20 +0000
asID: 56048
IP address blocks: 220.101.192.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.crl
rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 08:04:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:06:9a:d1:c6:58:d6:b4:6d:39:f9:52:02:6a:35:c3:54:78:2e:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48DCC10A7E92444E80655999E7C33C876CF1C5A8
Validity
Not Before: Sep 18 02:38:20 2026 GMT
Not After : Sep 17 02:43:20 2027 GMT
Subject: CN=C2FE23B8675E04EEF8E183E19273298C0623756F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:78:85:f3:99:52:d8:c0:19:6d:f2:a4:2a:2e:
3a:05:20:46:2c:62:a1:14:10:c8:8e:c8:31:9a:01:
cb:12:87:5a:76:4a:db:1d:7c:de:87:dc:87:90:cc:
b2:b9:2c:2a:15:1a:97:f5:7d:0a:1d:48:97:b9:b1:
40:19:ff:f5:42:25:7a:3b:2e:ca:bb:9b:dd:66:93:
6a:2a:92:15:48:b3:ca:f2:f1:ae:52:b9:d8:b4:3f:
c1:00:cb:e6:5d:e3:ee:2f:42:f9:ed:6e:10:5a:8e:
7f:b5:3e:69:53:75:f1:6b:85:ab:b7:e3:b2:e2:16:
b3:8a:4f:5e:8c:e2:04:96:91:bb:a5:df:28:75:45:
dd:d1:fd:3c:37:58:0e:45:a5:2e:5c:77:a6:43:ea:
9f:cd:6f:cb:1f:7e:49:7c:4d:0b:c4:02:62:eb:80:
24:77:f8:d1:56:1d:44:c1:21:e4:f8:83:11:11:f0:
6b:af:25:01:1d:f2:30:59:e5:b6:85:4e:2b:e5:d4:
78:42:32:8f:28:81:bd:1a:97:6f:1f:f9:c4:c6:e6:
da:bc:fb:92:ac:da:9b:cb:5b:3b:cc:d0:7c:f0:40:
4d:b9:da:ff:5f:d2:30:c2:23:46:27:8e:49:1e:24:
32:3a:9d:65:f3:f8:4a:3a:ed:cb:7f:8a:5b:53:73:
d5:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:FE:23:B8:67:5E:04:EE:F8:E1:83:E1:92:73:29:8C:06:23:75:6F
X509v3 Authority Key Identifier:
keyid:48:DC:C1:0A:7E:92:44:4E:80:65:59:99:E7:C3:3C:87:6C:F1:C5:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3232302e3130312e3139322e302f31392d3139203d3e203536303438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
220.101.192.0/19
Signature Algorithm: sha256WithRSAEncryption
1b:12:f9:e6:6a:34:70:c6:94:3d:46:41:92:2c:56:79:75:b2:
db:bd:11:0f:fb:55:ea:76:15:64:af:50:ea:95:3a:61:b1:cb:
28:6a:3e:e8:12:68:e9:cc:a4:f4:54:f2:90:1c:ab:16:95:cf:
24:0b:31:51:3b:e4:ee:08:93:01:88:4a:7c:9e:5b:d9:52:73:
78:4b:ce:8a:e3:d5:13:e5:67:0d:f9:f2:37:3f:09:cc:69:7c:
e1:a2:46:af:64:cd:f4:fc:37:31:7d:51:da:73:dc:88:26:09:
be:d8:d8:d9:1c:cd:c0:bc:ed:25:dd:3e:16:90:8d:53:50:af:
d2:57:b5:c8:bb:50:a0:4e:e9:f3:22:d0:8c:a6:f1:e2:6c:5d:
c6:56:40:b1:46:91:15:67:fa:71:9e:50:79:55:9b:89:01:ba:
e4:a1:68:2f:9c:f9:3d:51:03:9e:17:e9:18:52:6e:76:d9:52:
dc:89:4e:91:2c:75:40:bf:17:57:20:61:78:10:cd:e8:32:96:
6f:15:71:21:71:f3:d4:b0:20:a1:e3:ce:d7:2e:13:0a:c9:85:
54:24:67:72:81:6b:ec:4a:77:5d:14:f8:4c:f6:04:44:88:de:
27:43:d0:09:47:bd:a5:70:f6:02:78:ef:b6:1b:06:6a:20:fc:
b3:2d:2b:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 22:06:21 2026 by rpki-client